Privacy Notice
This notice explains how AITraining2U PLT handles personal data on WorkQuest2U, as required by the Personal Data Protection Act 2010 (PDPA). A Bahasa Malaysia version follows the English version. If the two differ, the English version applies.
Who is responsible
WorkQuest2U is operated by AITraining2U PLT (202504002669), Malaysia. Contact us about personal data at hi@aitraining2u.com.
- Visitors and public learners: we are the data controller for the limited data described below.
- Company workspaces: the organisation that invites you is the data controller for your staff data, and we process it on that organisation's behalf and instructions. Send requests about that data to your organisation first; we will help it respond.
What we collect
| Who | Personal data | Source |
|---|---|---|
| Visitors and public learners | No account is needed. Lesson progress and settings (such as sound and the last module opened) are kept in your own browser's local storage, not on our servers. Our hosting provider records technical data such as IP address, browser type and the pages requested, for security and to run the service. | Your browser and device |
| Company workspace users | Name, work email address, employee ID, department and role; the programmes assigned to you, lesson progress, assessment attempts, scores and results; certificates issued; sign-in records; and an audit log of administrator actions. | Your organisation (for example a staff list it uploads), and you, when you sign in and use lessons |
| People who contact us | Your name, contact details and what you tell us. | You |
We do not ask for sensitive personal data such as health, religious or biometric data. We do not use advertising or analytics trackers on WorkQuest2U.
Why we use it
- to provide lessons, assessments, certificates and company workspaces, and to let organisations assign training and see progress and records;
- to send sign-in, invitation and password emails;
- to keep the service secure, prevent misuse and fix problems;
- to answer your enquiries and support requests;
- to meet our legal obligations and protect our legal rights.
Providing workspace data is needed for your organisation to use WorkQuest2U. If it is not provided, you will not be able to use the company workspace, though public lessons stay available.
Who we share it with
- Your organisation: its administrators see the progress, results and certificates of the people in their workspace.
- Service providers that host and run WorkQuest2U for us under contract, including website hosting (Vercel), database and sign-in (Supabase) and email delivery (Resend). They may only use the data to provide their services to us.
- Authorities, where the law requires it or to protect rights, safety or property.
- A buyer or successor if our business is transferred, under the same protections.
We do not sell personal data.
Transfers outside Malaysia
Our service providers may store or process data outside Malaysia, for example in Singapore or the United States. We use providers that apply recognised security safeguards and contractual protections, and we transfer data only as the PDPA allows.
How long we keep it
We keep workspace data for as long as your organisation's workspace is active and as its agreement with us requires, then delete or anonymise it within a reasonable period unless the law requires us to keep it longer. Hosting logs are kept for a short period for security. Data in your browser stays there until you clear it.
How we protect it
We use access controls so organisations see only their own data, encrypted connections (HTTPS), restricted administrator access, and providers with recognised security practices. No system is completely secure. If a personal data breach is likely to cause significant harm, we will notify as the PDPA requires, and we will tell the organisation concerned without delay.
Your rights
Under the PDPA you may ask to access and correct your personal data, withdraw consent, limit its processing, and in some cases ask for it to be transmitted to another data controller. For workspace data, ask your organisation; for other data, email hi@aitraining2u.com. We may need to verify your identity and may charge a fee where the law allows. You can clear browser data at any time in your browser settings.
Children
WorkQuest2U is meant for working adults. Company workspaces are for people aged 18 or over unless an organisation arranges otherwise with us.
Changes
We may update this notice. The date at the top shows the latest version.
Notis Privasi (Bahasa Malaysia)
Notis ini menerangkan cara AITraining2U PLT (202504002669) mengendalikan data peribadi di WorkQuest2U menurut Akta Perlindungan Data Peribadi 2010 (PDPA). Sekiranya terdapat perbezaan antara versi Bahasa Malaysia dan Bahasa Inggeris, versi Bahasa Inggeris terpakai.
Siapa yang bertanggungjawab
WorkQuest2U dikendalikan oleh AITraining2U PLT, Malaysia. Hubungi kami di hi@aitraining2u.com. Bagi pelawat dan pelajar awam, kami ialah pengawal data. Bagi ruang kerja syarikat, organisasi yang menjemput anda ialah pengawal data bagi data kakitangannya, dan kami memproses data itu bagi pihak organisasi tersebut.
Data yang kami kumpul
- Pelawat dan pelajar awam: tiada akaun diperlukan. Kemajuan pelajaran dan tetapan disimpan dalam pelayar anda sendiri. Penyedia pengehosan kami merekodkan data teknikal seperti alamat IP, jenis pelayar dan halaman yang diminta untuk tujuan keselamatan.
- Pengguna ruang kerja syarikat: nama, e-mel kerja, ID pekerja, jabatan dan peranan; program yang ditugaskan, kemajuan pelajaran, percubaan penilaian, markah dan keputusan; sijil; rekod log masuk; dan log audit tindakan pentadbir.
- Orang yang menghubungi kami: nama, butiran hubungan dan maklumat yang anda berikan.
Kami tidak meminta data peribadi sensitif dan tidak menggunakan penjejak pengiklanan atau analitik.
Tujuan
Untuk menyediakan pelajaran, penilaian, sijil dan ruang kerja syarikat; menghantar e-mel log masuk dan jemputan; menjaga keselamatan perkhidmatan; menjawab pertanyaan; dan mematuhi undang-undang. Tanpa data ruang kerja, anda tidak dapat menggunakan ruang kerja syarikat, tetapi pelajaran awam kekal tersedia.
Pendedahan dan pemindahan
Data boleh didedahkan kepada organisasi anda, penyedia perkhidmatan yang mengehos dan menjalankan WorkQuest2U (termasuk Vercel, Supabase dan Resend), dan pihak berkuasa jika dikehendaki oleh undang-undang. Penyedia ini mungkin menyimpan data di luar Malaysia, contohnya di Singapura atau Amerika Syarikat, dengan perlindungan yang dibenarkan oleh PDPA. Kami tidak menjual data peribadi.
Penyimpanan dan keselamatan
Data ruang kerja disimpan selagi ruang kerja aktif dan menurut perjanjian dengan organisasi, kemudian dipadam atau dijadikan tanpa nama. Kami menggunakan kawalan akses, sambungan tersulit dan penyedia yang mempunyai amalan keselamatan yang diiktiraf.
Hak anda
Anda boleh meminta akses kepada dan pembetulan data peribadi anda, menarik balik persetujuan, mengehadkan pemprosesan, dan dalam keadaan tertentu meminta data dipindahkan kepada pengawal data lain. Bagi data ruang kerja, hubungi organisasi anda; bagi data lain, e-mel hi@aitraining2u.com.